Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS143948.roa
File: AS143948.roa (raw, json)
Hash identifier: +gpMaFOHLKzmJTjYfTVxULjXI7jDF2zdkdDCK/Z0SNw=
Subject key identifier: F3:88:B4:6A:01:26:C9:48:D3:98:9C:E5:FF:4C:27:8A:1F:46:17:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6EC3EC982B022E94CEE74AFF17A86B6E9790CDB1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143948.roa
Signing time: Mon 25 May 2026 01:51:12 +0000
ROA not before: Mon 25 May 2026 01:46:12 +0000
ROA not after: Mon 24 May 2027 01:51:12 +0000
asID: 143948
IP address blocks: 240a:a512::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c3:ec:98:2b:02:2e:94:ce:e7:4a:ff:17:a8:6b:6e:97:90:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:12 2026 GMT
Not After : May 24 01:51:12 2027 GMT
Subject: CN=F388B46A0126C948D3989CE5FF4C278A1F4617C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:67:9a:60:29:9e:a7:bd:75:f2:33:9c:6b:
82:17:0e:ce:43:90:07:1b:ad:fa:75:16:ca:06:de:
95:fe:51:32:31:37:12:73:f6:98:2b:1b:5d:90:89:
6b:51:0f:dd:12:7c:9c:9a:2f:d2:49:fb:f5:b2:13:
52:ba:fe:84:74:59:27:90:ca:48:33:ab:25:f1:be:
f4:2b:e5:0f:6f:0c:fb:7a:53:ed:52:5c:40:2e:82:
20:1a:d0:83:61:93:6d:d3:5b:1b:81:54:36:5b:40:
2f:3f:91:10:dd:87:18:fa:0e:30:9b:03:5b:2c:07:
5b:a6:2f:68:8e:d7:47:fb:d8:f4:1b:a4:5b:b2:ac:
a8:8d:97:6b:ae:c7:96:58:4d:62:f5:8a:ef:45:f1:
b1:d0:b9:b1:fe:8b:77:29:44:0b:11:d4:be:bd:d5:
62:cb:e6:7e:bd:2b:52:a8:ed:10:13:56:4d:5d:d7:
b5:c7:be:a3:6b:37:ff:6d:f9:50:c0:bd:8e:1e:f9:
cc:8a:c4:60:78:93:95:14:e9:5b:a1:71:80:96:c7:
df:de:75:61:5e:86:38:9d:7e:37:78:fb:e7:33:23:
e8:04:4f:77:91:06:fd:60:f5:90:3b:0f:5a:d4:3f:
30:d8:25:08:1b:84:6f:81:5e:b6:f9:e0:37:33:0c:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:B4:6A:01:26:C9:48:D3:98:9C:E5:FF:4C:27:8A:1F:46:17:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS143948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a512::/32
Signature Algorithm: sha256WithRSAEncryption
76:20:88:f0:c7:37:f5:4d:04:5c:19:46:50:7d:7b:22:14:06:
0f:3b:1d:d8:6b:b8:83:27:7e:d2:d1:f3:6f:1d:d0:ba:f2:63:
7a:0b:d9:5d:03:c4:29:7b:38:43:90:4b:b5:7b:33:bb:4a:8b:
e3:a2:f3:27:64:68:b4:a9:b9:8f:cf:d6:f5:f3:89:76:19:46:
d2:eb:1a:da:52:21:eb:be:76:2e:73:d8:1c:ec:2d:82:30:c2:
09:39:8a:b1:2f:c3:ab:b2:36:fb:79:7f:86:e0:1b:94:cb:0f:
91:10:b4:fc:f0:68:b7:8a:8c:fd:e2:a1:89:1c:4c:86:7a:ce:
57:d3:47:48:a4:5b:22:ff:99:92:e5:17:ad:9a:d0:f9:5c:76:
33:23:27:1b:89:4f:92:ac:1f:fc:24:ae:59:b1:11:ff:82:81:
31:97:f1:3b:8b:f4:69:19:cc:16:a7:c4:b1:0e:8a:fa:7d:c0:
bb:19:70:fc:e4:68:a6:5f:fe:a1:7f:ab:2c:e5:7d:68:ff:95:
8a:02:ae:91:db:48:66:63:80:27:67:68:49:2b:5b:6c:68:20:
82:20:40:e4:a6:a8:7d:ad:bc:54:12:06:90:17:6f:5c:5f:76:
3a:90:1d:56:43:b1:51:15:a8:35:ea:a0:e8:1c:60:b9:01:32:
14:6e:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client